Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df428acf-90cd-3f0c-ab0d-0f10ec74aa00.roa
File:                     df428acf-90cd-3f0c-ab0d-0f10ec74aa00.roa (raw, json)
Hash identifier:          N12uYG7ilp5HiyRnBBkuhYO3BE9rWCFbPFraLsEUXoo=
Subject key identifier:   B8:61:18:19:A9:A5:A7:89:21:46:D0:5A:FE:70:85:AA:EC:82:7C:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB704BC8FD2214EEBE9800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df428acf-90cd-3f0c-ab0d-0f10ec74aa00.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        141.151.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:70:4b:c8:fd:22:14:ee:be:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=c160196b-1291-4212-9633-e401c79358cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:20:5a:c1:f1:8c:af:19:37:1c:67:05:f2:
                    3b:3f:8e:28:16:47:df:31:55:79:1d:43:28:61:82:
                    46:1b:99:e2:55:d7:22:5c:ce:b5:21:bb:68:1a:d6:
                    23:78:ae:ee:d2:83:c0:52:6f:f2:4b:27:79:c9:a5:
                    c5:01:5b:4e:85:d6:da:53:a4:1f:fe:43:5c:c2:55:
                    73:e2:c4:b5:d0:01:05:bf:d9:d4:ea:41:f9:81:12:
                    46:ab:53:ea:37:69:9a:9d:78:a7:99:9f:c3:92:4e:
                    44:51:85:aa:ba:f0:63:81:19:b2:b2:a9:dd:97:ce:
                    a2:e1:1a:08:c3:cb:f3:ed:a0:e8:97:00:67:d8:ae:
                    ce:f7:79:5d:c4:8e:8f:d3:8c:db:42:21:c4:34:d4:
                    db:22:ed:40:2a:26:52:38:2f:35:90:1e:28:49:45:
                    68:d2:36:1c:03:72:b2:ef:be:2a:ff:9c:12:e5:9a:
                    fc:51:c7:ee:8d:58:c9:02:aa:dd:05:8e:9b:37:93:
                    90:ff:78:ff:ae:1e:43:a8:17:4e:23:c9:26:01:42:
                    30:93:0a:81:95:09:98:b9:f5:69:9d:07:ce:c4:68:
                    c1:f7:01:04:b1:fe:1b:eb:f7:10:8a:44:c1:fd:d1:
                    ad:98:33:96:6c:df:e4:7d:d4:ba:f0:36:45:83:64:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:18:19:A9:A5:A7:89:21:46:D0:5A:FE:70:85:AA:EC:82:7C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df428acf-90cd-3f0c-ab0d-0f10ec74aa00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.151.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a2:8a:5e:2d:ac:56:ef:8a:d8:6b:c7:43:bf:60:0e:05:b9:
         08:c4:56:db:01:b5:f9:ce:85:ad:4e:b3:05:c4:4a:f2:c4:b7:
         80:d6:8b:03:c2:65:c1:18:5a:89:d4:e8:2b:bd:88:6f:78:47:
         de:2b:26:b6:ea:26:e5:4e:e0:cf:21:c7:42:00:2e:27:1e:9b:
         f4:ca:53:50:be:27:2f:14:e6:f7:88:de:6f:61:89:87:2e:5b:
         dd:24:d1:25:e5:62:3d:94:4b:a8:df:57:f6:f7:aa:3c:bd:b4:
         44:94:a9:9b:20:51:b5:03:8b:15:de:8d:4e:be:8d:8e:ac:8b:
         f6:8f:27:e7:87:e9:84:c2:28:b5:c6:46:e0:ea:36:67:c0:98:
         03:5e:df:c4:3c:b9:73:d2:09:2f:0d:30:eb:85:08:1e:bf:87:
         bc:8d:c6:c8:ad:17:47:20:9a:2e:44:2b:b7:ac:df:68:6d:68:
         f1:e7:14:9f:3d:2a:81:d3:bf:91:fe:88:bb:97:be:75:5f:4c:
         a7:1a:c1:bf:a3:63:49:f1:68:7a:69:7a:ae:0c:8a:e5:8f:93:
         1b:69:a8:12:b9:50:b3:58:cd:af:a3:aa:a6:96:fe:31:3e:c4:
         9c:3a:d5:f7:9b:10:f3:78:1c:bd:f7:59:48:da:24:8b:f9:cd:
         5e:0e:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:36 2025 by rpki-client